Critical Elementor Pro bug exposes WordPress sites to RCE attacks

{"#elementor-pro-bug":"The core issue lies in how Elementor Pro handles file uploads. The validation loop and processing loop have different logic for empty filenames, allowing an attacker to bypass security checks.","file-upload-module":"Elementor Pro uses a File Upload module that employs separate loops for validation and processing. This separation leads to inconsistent handling of empty filenames.","uniqid-function":"The uniqid() function used in the payload filename is predictable and can be exploited by attackers, enabling them to determine the exact URL of the malicious file."}